IT Governance Senior Officer

It Governance Senior Officer

The IT Governance Senior Officer is responsible for developing, implementing, and maintaining the IT governance framework, policies, and processes to ensure that technology activities are aligned with business objectives, regulatory requirements, and risk appetite.

The role provides oversight over IT controls, compliance, and performance, enabling transparent decision-making, effective risk management, and consistent delivery of IT services within the fintech and regulatory expectations (e.g., SAMA guidelines, ISO standards).

• IT Governance Framework and Policies

Develop, maintain, and periodically review the IT governance framework, including policies, standards, procedures, and guidelines aligned with SAMA ITGF, SAMA Outsourcing Framework, COBIT, ITIL, ISO/IEC 27001, and local regulatory requirements.

Ensure IT governance artefacts are communicated, understood, and adopted across IT and business units.

• IT Risk, Control, and Compliance Oversight

Coordinate identification, assessment, and treatment of IT risks in collaboration with Risk, Information Security, and relevant stakeholders, and ensure integration with the enterprise risk management framework.

Oversee the design and effectiveness of IT controls, monitor compliance with internal policies and external regulations, and track remediation of gaps and audit findings.

• IT Performance Management and Reporting

Define and monitor key performance indicators (KPIs) and key risk indicators (KRIs) for IT governance, service performance, and compliance, ensuring regular analysis and escalation of issues.

Prepare clear and concise governance reports and dashboards for IT management, risk committees, and, where applicable, the Board or Board sub-committees.

• Audit, Assessment, and Assurance

Coordinate internal and external IT audits, regulatory inspections, and independent assessments, including preparation, evidence collection, responses, and follow-up actions.

Maintain a repository of audit observations, action plans, and closure evidence, ensuring timely implementation of corrective and preventive actions.

• Governance of Change, Projects, and Vendors

Support governance of IT projects and change management (e.g., adherence to architecture principles, security and compliance gates, documentation standards).

Contribute to governance of key IT vendors and outsourced services, ensuring that contracts, SLAs, and performance reviews reflect governance, risk, and compliance expectations.

• Awareness, Training, and Continuous Improvement

Promote awareness of IT governance, policies, and good practices through training, workshops, and targeted communications.

Continuously benchmark and propose enhancements to governance processes in line with industry best practices and emerging regulatory/technology trends.